Privacy
What we collect
- Your input. The business description, optional offer and optional facts you type into the studio or tick in a website brief. We send it to the AI service described below to generate your creative. We do not keep your inputs or the creatives we return; they are not written to our database. They exist in your browser until you close or reload the page.
- Websites you paste. If you paste a website address, our server fetches that public page once (only if its robots.txt allows it) to draft a brief, and shows you the brief. We do not keep the page or the address. Images and the logo from the site are shown to you through our server and may be cached by Cloudflare for up to a day. Only the parts of the brief you choose to use go into your creative or project.
- Editor Lab projects. When you save a project, we store it (its text, layout, colours and references to images) and any images you upload into it on Cloudflare KV against your anonymous browser ID, so you can open it again in the same browser. Saved projects are deleted automatically 180 days after you last save them, and uploaded images 400 days after upload. You can delete a project at any time from Projects. Music you upload stays in your browser and is never sent to us. If you don't save, your work stays only in your browser.
- Video. Video ads are assembled and recorded in your browser. The finished video is never uploaded to us.
- Voiceovers (Oomph Studio, where offered). When you generate a voiceover, we send the script text and the voice you picked to Cloudflare Workers AI, which runs Deepgram's Aura-2 voice model (below), and store the resulting audio for 30 days so you can reuse it without spending another credit. We keep a count of your voiceover credits and usage against your anonymous browser ID. Don't put personal information in a script.
- Managed campaigns requests. If you use the Managed campaigns form ("Ask about managed ads"), we store what you enter (your name, email, business name, website, the ad platforms and budget range you pick, and your message), when you sent it and the wording you agreed to, and send it to our own inbox (hello@useoomph.com) as an internal alert through Cloudflare's email service (Cloudflare Email Sending), so we can reply within 1 business day. We use it only to reply to your request and talk with you about managed campaigns; we do not add you to a newsletter or share or sell it. We delete it 12 months after you send it, or sooner if you ask.
- Credit restores. If you restore credits to a new browser, we send the PayPal order ID you enter to PayPal and compare the payer email PayPal returns with the email you typed. We do not store the email you typed for this. We keep a record of the restore (order ID, the two anonymous browser IDs, the number of credits moved and the time) so each order can only be restored once.
- An anonymous browser ID. The first time you use the studio we set one first-party cookie (
oomph_uid, HttpOnly, about one year). It is a random ID we generate, not your name or email. We use it to keep your credit balance on our server. - Your credit ledger. Stored on Cloudflare KV against that anonymous ID: how many creatives you have generated and when you last generated one, and for each pack you buy, the PayPal order ID, capture ID, amount, date, and how the purchase was confirmed (return page or PayPal notification). We keep this for as long as needed to honor your credits, handle refunds and keep accounting records, and delete it on request (see below).
- Abuse-prevention counters. To stop automated abuse and to cap our usage costs we count requests per network. We store a keyed one-way hash of your IP address (not the address itself) with a request count, and delete it automatically after about 48 hours. We also keep anonymous daily totals.
- Server logs. Cloudflare, our hosting provider, processes standard request data (IP address, user agent, time, URL) to deliver and protect the site.
We do not use advertising or analytics cookies or trackers, and we do not sell personal information.
Who processes your data
- Cloudflare, Inc. hosts the site and stores the data described above (Cloudflare Workers and KV) and runs the AI models (Cloudflare Workers AI) that turn your text into a headline, caption and image. The models are Meta Llama 3.1 8B Instruct (text) and Black Forest Labs FLUX.1 schnell (image), both running on Cloudflare. Your input is processed by Workers AI when you click Generate, and the text of a layer is processed when you use AI rewrite in Editor Lab. Cloudflare also delivers the internal alert for Managed campaigns requests to our own inbox (Cloudflare Email Sending), and looks up website addresses you paste through its DNS service (cloudflare-dns.com). See Cloudflare's own terms and privacy notice for how it handles data.
- Deepgram (Deepgram, Inc.) makes the Aura-2 voice model we use for voiceovers. The model runs on Cloudflare's network through Workers AI, so your script and voice choice are processed by Cloudflare. Cloudflare says it does not use them to train or improve any AI model, including Deepgram's. Don't put personal information in a script.
- PayPal. Payment is handled entirely by PayPal. You are redirected to PayPal to pay; we never see or store your card or bank details. PayPal tells us whether the payment completed and gives us the order and capture IDs and the amount. PayPal's privacy statement governs the information you give PayPal.
- Fonts. The fonts on this site and in Editor Lab (DM Sans, Syne, Bebas Neue and Playfair Display, all open source) are served from our own domain. Your browser does not contact Google Fonts or any other third-party font service.
Your choices
- You can block or clear the cookie in your browser. Without it you will appear as a new visitor, and credits tied to the old ID will not be shown. If that happens after a purchase, use "Restore credits" in the studio with your PayPal order ID and the email you paid with, or email us your PayPal order ID and we will restore them.
- To ask what we hold about an ID or order, or to have it deleted, email hello@useoomph.com. We will need your PayPal order ID to find your record. We may keep payment records we are required to keep.
- Oomph is not directed to children under 13 and we do not knowingly collect their information.
Changes
If we change what we collect we will update this page and its date.
Contact: hello@useoomph.com